£500 - £600 per day
Outside Spy
Hybrid (London, UK)
Incident Response Analyst (DFIR)
You’ll join the incident response team at an MSSP in a hands-on DFIR role, taking incidents across a range of client environments from first alert through containment, digital forensics and lessons learned. You’ll also be the person clients turn to during an incident, guiding them through it and presenting what you found once it’s resolved.
The essentials
£500 - £600 per day, Outside IR35
London, 2 days a week on site
Contract role, client-facing, working alongside Security Operations, Professional Services and Customer Success teams
What you’ll actually do
Triage and investigate alerts from SIEM, EDR/XDR, identity, email, cloud and network platforms, then set severity and escalate against client service levels
Lead or support investigations into phishing, malware, account compromise, data loss and unauthorised access, coordinating containment and recovery...